Leave No Trace
The Boy Scouts embrace a philosophy that protects our environment from the effects of hiking, camping, and other outdoor activities. It is called “Leave No Trace,” and it affects most outdoor endeavors. The basic idea is that after engaging in an outdoor activity, there should be no trace that you were ever there. The reality is that most outdoor venues allow a more relaxed version, possibly called “Leave Almost No Trace.”
In computer forensics, though, you must adhere to a strict “Leave No Trace” policy. You must prove that none of your analysis efforts left any trace on the evidence media. In fact, you’ll have to prove that you never modified the evidence in any way.
There are several ways to ensure that evidence remains unmodified, ...
Get Computer Forensics JumpStart, Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
